Manage Gallery Connection permissions via an Active Directory group

We leverage Active Directory groups to manage user permissions to most of our company's resources like databases, file shares, applications, etc.  This idea is for the ability to manage a Gallery Data Connection via an Active Directory group.  In many cases, our AD group membership actually dictates what permissions a gallery connection should have, but we must manually add/remove users to the Alteryx connection to keep it synched with AD.

 

I think there are several ways Alteryx could be enhanced to support this; i.e. the AD group could be specified on the connection itself or it could be inherited from a Studio where the subscription is enhanced to support assigning AD groups to it (which could benefit other areas of Alteryx).

 

I'm told by Alteryx support that this functionality is unsupported but to post the idea here.  If anyone knows of workarounds to this limitation I'd certainly be interested!

Comments
17 - Castor
by 17 - Castor
‎10-21-2020 05:42 AM

Our team could use this feature! We use AD groups for everything else and this would make managing data connections easier.

by
‎10-21-2020 08:37 AM

Thank you for your feedback and idea!

 

We greatly appreciate the feedback on how to improve and streamline permissions in Gallery. If you haven't, be sure to check out our Submission Guidelines if you haven't yet, as it goes over the idea process in a bit greater detail.

by
‎11-23-2020 03:49 PM

Thanks for the feedback. This is now implemented in 2020.4 with a small workaround.

 

We've added custom user groups with which a Gallery Data Connection can be shared.

 

For infrastructure reasons, a GDC cannot be shared directly with an AD group, however, you can create a custom user group whose only member is an AD group of your choice. Then you can assign the GDC to the custom group and all of your AD group members will have access to it.

 

So with a very small amount of upfront work, your maintenance challenge is solved. 

by
‎11-24-2020 06:51 AM

Thanks John, I'm looking forward to giving this new feature a try when we apply that latest update!

by
‎12-29-2020 10:33 AM

Apologies...my previous statement was incorrect. We are planning on being able to share GDCs with custom groups but the work is not yet complete. Stay tuned for this feature in the near future.

by
‎01-04-2021 09:44 AM
Status changed to: Accepted

Thank you for your feedback!

 

As John mentioned this feature has been included on the roadmap for a near future release. We'll do our best to update this idea once the functionality is available!

by
‎03-06-2021 06:24 PM

Hi, 

 

We are looking for this functionality too. Any idea which future version this is going to be implemented? 

 

Thanks.

by
‎03-08-2021 08:02 AM

Hi @imanchem, we'd rather not name a version but it's one of our top priorities and it's mostly baked, so stay tuned...

by
‎09-27-2021 08:14 AM

@imanchem, we released the ability to share Gallery Data Connections with custom user groups in Alteryx Server 2021.2...have you gotten that version? How's it working for you?

by
‎03-19-2024 06:02 AM
Status changed to: Under Review
 
by Alteryx
‎05-13-2024 03:50 AM

Workaround is to map AD group to custom group and assign permissions at user group level.